Privacy Policy

1. Controller

Zygraen Intelligence, S.A. de C.V. ("Zygraen"), located at Avenida Paseo de las Palmas 340, postal code 11000, Miguel Hidalgo, Mexico City, Mexico, is the controller of the personal data described in this notice.

Privacy questions and rights requests may be sent to privacy@zygraen.com.

2. Scope

This notice applies to personal data obtained through the website, the Interactive Decision Brief, email, WhatsApp when voluntarily selected, and preliminary communications concerning a possible engagement.

It does not replace a later engagement-specific notice or contract.

3. Data processed

Identity and contact

Name and surname, corporate email, telephone, preferred language, country or region.

Professional context

Company name and general information about the organisation, contemplated move, market, counterparty, relationship or decision. Job title is not a required enquiry field.

Matter context

Matter type and stage, indicative exposure range, timing, objectives, selected answers, free text and follow-up history.

Technical and usage

IP address, browser/device data, IP-derived approximate location, timestamps, language, referrer, consent record, identifiers and events according to cookie choices.

External channel

Profile, telephone and message data made available when a user voluntarily starts a WhatsApp conversation.

DO NOT SUBMIT

Identity documents, bank details, exact financial records, contracts, evidence, allegations, privileged material, third-party personal data or other sensitive/confidential information through the public enquiry.

Zygraen will provide an appropriate channel later if needed.

4. Necessary purposes

Zygraen processes personal data to:

• Receive, authenticate and respond to the enquiry or communication.

• Understand the corporate situation, decision and exposure; assess preliminary fit, capability and scope.

• Contact the applicant, schedule a conversation and prepare or discuss a proposal, scope, NDA or engagement documentation.

• Conduct proportionate conflict, integrity, fraud-prevention, security and client-acceptance checks.

• Maintain communication, consent, instruction and decision records; secure systems and establish, exercise or defend legal rights.

• Operate, secure, troubleshoot and improve the site and enquiry flow using necessary technical information.

Enquiry data is not used for newsletters or unrelated marketing. Any future marketing use will require a separate, optional consent and withdrawal mechanism.

5. Consent

By voluntarily submitting an enquiry or contacting Zygraen, the individual acknowledges this notice and consents to the processing needed to respond and administer the preliminary relationship, except where consent is not required by law.

Analytics and advertising consent is requested separately and may be refused without losing core site access.

6. Retention

Inactive enquiry

Up to 24 months after the last substantive interaction, unless earlier deletion is appropriate or longer retention is required for a dispute, security incident or legal obligation.

Accepted engagement

Moved to the client file and retained under engagement documents, limitation periods and legal obligations.

Consent/security evidence

As needed to evidence compliance, investigate incidents and defend rights.

Cookies

According to the live inventory and only as long as needed for the stated purpose.

7. Service providers and disclosures

Microsoft 365, hosting, security and technical-support providers may process data for Zygraen under instructions and safeguards, including outside Mexico.

If the visitor opts in, Google Analytics and the LinkedIn Insight Tag may receive online identifiers and events under their relevant terms.

A WhatsApp conversation is also subject to the provider's own notice.

Zygraen does not sell personal data.

Legally required or protective disclosures may be made to advisers, authorities or courts. Consent will be obtained where a transfer legally requires it.

8. Cookies

Necessary technologies support security, language, continuity and consent storage.

Analytics and advertising technologies are optional, blocked by default and controlled through equivalent accept, reject and configure choices.

See the Cookie Policy.

9. ARCO rights and controls

Individuals may request access, rectification, cancellation or objection (ARCO), withdraw consent or limit use/disclosure by emailing privacy@zygraen.com.

The request should include name, response channel, proof of identity and authority where relevant, a clear description of the right and data, and locating information.

Zygraen will communicate its determination within 20 days after receiving a complete request and, if granted, implement it within the following 15 days, subject to legally permitted extensions and exceptions.

Exercise is free except permitted reproduction or delivery costs.

A holder who considers that a response violates applicable law may use the procedure available before Mexico's Secretaría Anticorrupción y Buen Gobierno within the statutory period.

10. Security, changes and controlling text

Zygraen applies reasonable safeguards proportionate to the limited public-enquiry scope, but no system is absolutely secure.

Legally reportable material breaches will be notified as required.

Material notice changes will be published with a new date, and renewed notice or consent will be used where required.

The Spanish notice controls for Mexican-law compliance; translations are interpreted consistently with it and mandatory law.